Middle Security Engineer

CoinsPaid offers ready-to-use crypto payment solutions tailored to business’ every need. Standing at the forefront of mass adoption, our products help businesses gear up for the new era of digital assets. We showed a tremendous growth in terms of transactions and volumes since 2019 and in 2023 were marked by Forbes as the "Best Crypto Payment Gateway for High-Volume Transactions". 
Headquartered in Estonia and having 3 international hubs, we are still a remote-first company with employees working from 30+ countries around the world. At CoinsPaid, we are passionate about crypto, fintech and are putting great effort into building a team that will get the world ready for every-day crypto use. If these feel close to you - give us a shout!

Responsibilities:

• Conducted alert triage, investigation, scoping, and remediation activities using EDR/XDR platforms, ensuring timely response to endpoint and extended detection alerts
• Operated and maintained Data Loss Prevention (DLP) technologies, monitoring data movement and enforcing policies to prevent unauthorized data exfiltration
• Performed triage of security alerts, distinguishing false positives from true threats, and executed appropriate escalation or resolution workflows
• Utilized Security Information and Event Management (SIEM) platforms to write, test, and tune detection rules, integrate log sources, and manage comprehensive investigation procedures
• Analyzed Web Application Firewall (WAF) events, created and tuned rulesets to block malicious traffic while minimizing false positives
• Participated in end-to-end incident response, including detection, forensic analysis, containment, eradication, and recovery of cybersecurity incidents
• Maintained and improved incident response playbooks, ensuring alignment with current threats and best practices
• Led vulnerability management efforts by conducting scans, prioritizing findings based on risk, and coordinating with stakeholders for timely remediation
• Reviewed and interpreted logs from diverse sources including operating systems, applications, network appliances, and cloud infrastructure to support investigations and compliance

Requirements:

• Strong hands-on experience with EDR/XDR platforms for alert triage, investigation, scoping, and incident remediation
• Practical knowledge of Data Loss Prevention (DLP) technologies, including policy management, monitoring, and enforcement to prevent data leaks
• Proven ability to triage security alerts, identify false positives, and respond appropriately to real security threats
• Proficiency with SIEM platforms, including writing and tuning detection rules, integrating log sources, and conducting in-depth investigations
• Experience in Web Application Firewall (WAF) management, including event analysis and rule customization to defend against web-based threats
• In-depth understanding of incident response processes, with hands-on involvement in detection, analysis, containment, eradication, and recovery stages
• Ability to develop and maintain incident response playbooks, aligning procedures with evolving threat landscapes and organizational needs
• Solid background in vulnerability management, including vulnerability scanning, risk-based prioritization, and coordination of remediation actions
• Competence in reading and analyzing logs from operating systems, applications, network devices, and cloud environments to support security investigations and ensure compliance
• Good level of spoken and written English (B1+) and Russian

Nice to have:

• Experience with cloud environments
• Knowledge of Kubernetes environment and containerized applications
• Familiarity with the fintech domain

Why should you choose CoinsPaid?
To become a part of this solid team, passionate about their jobs and the crypto industry as a whole. To feel a great team spirit and meet people supporting each other's growth and development. To become a part of a rapidly developing international company and a crypto payments leader. Only in 2024 CoinsPaid was awarded more than 10 times:
- Acquisition International 2024 - Best Crypto-payment Solutions Firm 2024 - Europe;- World Business Annual Awards 2024 - Leading Blockchain & Cryptocurrency Firm in Europe 2024;- World Business Annual Awards 2024 -  Best Blockchain Initiative Europe 2024;- World Business Annual Awards 2024 - Best Blockchain Fintech Company Europe 2024;- Global Brands Magazine Awards - Leading Cryptocurrency Payment Solutions;- ICA Compliance Awards - Development of Automated Real-time Risk Assessment System;- Europe Fintech Awards - Crypto Award;- EiGE Awards - Best Payment Provider 2024;- World Business Annual Awards 2024 - Best Cryptocurrency Payment Solution Provider Europe 2024;- World Economic Magazine 2024 - Best Digital Payments Solutions Provider;- Malta Fintech Awards by Dynamic Events - Payment Services Provider of the Year;- Global Brands Magazine Awards - Best Crypto Payment Gateway;- Business Awards UK - Best Cryptocurrency Tech;- EGR B2B - Best Cryptocurrency Service Supplier 2024;- Global Cards & Payments Innovation Awards - Best B2B Payments Initiative;- International Investor Award - Most Advanced Crypto Payment Processing Firm 2024.
Solid facts about CoinsPaid:
- Private and profitable company, registered and licensed in Estonia;- Secure business, with regular financial and regulatory audits;- Over 10 years of experience in the blockchain development;- Over €700M processed in crypto monthly;- Over 1M transactions processed monthly;- Over 800 merchants accounts serviced;- Over 270 team members across 30+ countries.
By joining CoinsPaid now, you’ll participate in building the world's best crypto payment ecosystem, conquering new markets, and popularising cryptocurrencies.
Sounds good? Well then, we can’t wait to see your resume!To learn more please visit: https://coinspaid.com/about-us/ & https://coinspaid.com/careers/